CVE Tools
Track your stack

Villatheme

18 CVEs tracked since 2026. Since Oct 2026, none of them reached CISA KEV.

Villatheme CVEs per month

Oct 2026 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Villatheme CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-10180

Products

The products that kept showing up in Villatheme's monthly top three, with their CVEs summed over those months.

  1. Photo Reviews For Woocommerce41 month
  2. Affi – Affiliate Marketing For Woocommerce21 month
  3. Salevo21 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Villatheme.

  1. CVE-2026-103081WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability7.5
  2. CVE-2026-103358WordPress Email Template Customizer for WooCommerce plugin <= 1.3.4 - Content Injection vulnerability7.5
  3. CVE-2026-103080WordPress Salevo plugin <= 1.3.0 - Broken Access Control vulnerability5.3
  4. CVE-2026-103356WordPress TMDS plugin <= 1.0.15 - Broken Access Control vulnerability5.4
  5. CVE-2026-103685WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.4 - Broken Access Control vulnerability4.3
  6. CVE-2026-103357WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability—
  7. CVE-2026-104398WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability9.8
  8. CVE-2026-103071WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability7.5
  9. CVE-2026-100161Photo Reviews for WooCommerce <= 1.2.30 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'wcpr_image_upload_id' Parameter7.2
  10. CVE-2026-103072WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability4.3
  11. CVE-2026-97275WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - Bypass Vulnerability vulnerability5.3
  12. CVE-2026-102383WordPress Lookzy plugin <= 1.1.14 - Broken Access Control vulnerability6.5
  13. CVE-2026-100515WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerability7.1
  14. CVE-2026-97071WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability5.3
  15. CVE-2026-101923Photo Reviews for WooCommerce <= 1.2.30 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'wcpr_image_upload_id' Parameter8.1

The record

Peak rank
#66 in Oct 2026
Busiest month shown
Oct 2026, 18 CVEs
Months with a KEV entry
0 since Oct 2026
Monthly snapshots
1 since 2026
Villatheme's full record, month by month